X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Fbacula%2Fmanifests%2Fclient.pp;h=dfeb176ed2ed4dbf05350cc7e6c920be2ec4efef;hb=fef6fe13456346f5ab0c74ef870ee50f23c1607e;hp=5a8f41f1fdfe081c907ecdd9571b01dae6f2b598;hpb=93aa8a665a0d34bfe7a16c4e65dbd4875feac197;p=mirror%2Fdsa-puppet.git

diff --git a/modules/bacula/manifests/client.pp b/modules/bacula/manifests/client.pp
index 5a8f41f1f..dfeb176ed 100644
--- a/modules/bacula/manifests/client.pp
+++ b/modules/bacula/manifests/client.pp
@@ -26,8 +26,16 @@ class bacula::client(
     }
 
     # allow access from director
-    Ferm::Rule::Simple <<| tag == 'bacula::director-to-fd' |>> {
-      port => $bacula::bacula_client_port
+    Ferm::Rule::Simple <<| tag == "bacula::director-to-fd::${bacula::bacula_director_address}" |>> {
+      port => $bacula::bacula_client_port,
+    }
+
+    # get access to the storage
+    @@ferm::rule::simple { "bacula::fd-to-storage::${::fqdn}":
+      tag         => "bacula::director-to-storage::${bacula::bacula_storage_address}",
+      description => 'Allow bacula-fd access to the bacula-storage',
+      chain       => 'bacula-sd',
+      saddr       => $bacula::public_addresses,
     }
   } elsif $ensure == 'absent' {
     file { '/etc/bacula':